Zdnet is reporting that a flaw in the previous Debian kernel allowed an attacker to elevate priveleges on Debian servers. Apparently the development team had been aware of the vulnerability, and had been working to patch it since September. The patch was too little too late, however, as the latest kernel was released last Friday, & the attacks had occurred the week before.

Read the full story here.